# US 11,444,770 B2 · Systems and methods for data access control of secure memory using a short-range transceiver

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 11,444,770 B2
- Document ID: US11444770B2
- Status: Granted
- Kind: B2
- Application number: 16/906,653
- Filed: 2020-06-19
- Published: 2021-04-22
- Granted: 2022-09-13
- Earliest claimed: 2019-10-18
- Assignees: Capital One Services, LLC
- Applicants: Capital One Services, LLC
- Inventors: Jeffrey Wieker; Patrick Zearfoss; Clayton Johnson
- Web page: https://patentgrep.com/patent/US11444770B2

## CPC

- H04L 9/3213: {using tickets or tokens, e.g. Kerberos (network architectures or network communication protocols for entities authentication using tickets in a packet data network H04L63/0807)}
- G06F 3/0622: {in relation to access}
- G06F 3/0623: {in relation to content}
- G06F 3/0637: {Permissions}
- G06F 3/064: {Management of blocks}
- G06F 3/067: {Distributed or networked storage systems, e.g. storage area networks [SAN], network attached storage [NAS]}
- G06F 21/35: communicating wirelessly
- G06F 21/44: Program or device authentication
- G06F 21/6245: {Protecting personal data, e.g. for financial or medical purposes}
- G06F 21/78: to assure secure storage of data (address-based protection against unauthorised use of memory G06F12/14; record carriers for use with machines and with at least a part designed to carry digital markings G06K19/00)
- H04L 9/0894: {Escrow, recovery or storing of secret information, e.g. secret key escrow or cryptographic key storage}
- H04L 63/062: {for key distribution, e.g. centrally by trusted party (cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819)}
- H04L 63/0853: {using an additional device, e.g. smartcard, SIM or a different communication terminal (cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234)}
- H04W 4/80: Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication
- H04W 12/02: Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]
- H04W 12/0431: Key distribution or pre-distribution; Key agreement
- H04W 12/47: using near field communication [NFC] or radio frequency identification [RFID] modules
- G06F 3/0673: {Single storage device}
- G06F 2221/2115: Third party
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)
- G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N)
- H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72)

## Abstract

Systems and methods for controlling data access through the interaction of a short-range transceiver, such as a contactless card, with a client device are presented. Data access control may be provided in the context of creating and accessing a secure memory block in a client device, including handling requests to obtain create and access a secure memory block via the interaction of a short-range transceiver, such as a contactless card, with a client device such that, once the secure memory block is created in memory of the client device, personal user data may be stored in the secure memory block, and access to the stored personal user data may only be provided to users authorized to review the data. An exemplary system and method may include receiving from a client device of the user a user token and a request for a data storage key, the request generated in response to a tap action between a contactless card and the client device, the contactless card associated with the user, verifying that the user is authorized to create a secure memory data block on the client device, and transmitting to the client device the data storage key, such that the client device may create a secure memory data block in memory of the client device and encrypt the secure memory data block using the data storage key.

## Claims

### Claim 1

A data access control system, comprising:
a contactless card comprising a communications interface, a processor, and a memory, the memory storing a user token, wherein the user token comprises a user key; and
a client application comprising instructions for execution on a client device, the client application configured to:
in response to a tap action between the contactless card and the client device, receive the user token from the contactless card, and transmit the user token and a request for a data storage key;
receive, in response to the request, the data storage key, wherein the data storage key is generated from the user key;
create a secure memory block in a memory of the client device;
store personal user data in the secure memory block;
encrypt the secure memory block using the data storage key; and
permit a second application on the client device to access the personal user data.

### Claim 2 (depends on 1)

The data access control system of claim 1, further comprising a server configured for data communication with the client device, wherein the server is configured to:
receive from the client device the user token and the request for the data storage key;
identify a user based on the user token;
verify that the user is authorized to create the secure memory block in the client device; and
transmit to the client device the data storage key.

### Claim 3 (depends on 2)

The data access control system of claim 2, wherein the server is further configured to authenticate the user based on the user key.

### Claim 4 (depends on 2)

The data access control system of claim 2, wherein the client application is further configured to:
in response a tap action between the contactless card and the client device, transmit to the server the user token and a request for a data access key;
receive from the server the data access key; and
decrypt the secure memory block using the data access key.

### Claim 5 (depends on 4)

The data access control system of claim 4, wherein the server is further configured to:
receive from the client device the user token and the request for the data access key;
identify the user based on the user token;
verify that the user is authorized to access the secure memory block in the client device; and
transmit to the client device the data access key.

### Claim 6 (depends on 4)

The data access control system of claim 4, wherein the client application is further configured to re-encrypt the secure memory block after a predetermined time period.

### Claim 7 (depends on 4)

The data access control system of claim 4, wherein the user token comprises a user key, and the data access key is generated from the user key.

### Claim 8 (depends on 1)

The data access control system of claim 1, wherein the personal user data comprises a digital driver's license.

### Claim 9 (depends on 1)

The data access control system of claim 1, wherein the user token comprises a user key, and wherein the client application is further configured to:
in response to a tap action between the contactless card and the client device, receive the user token from the contactless card;
verify that a user associated with the user token is authorized to access the secure memory block in the client device;
generate a data access key based on the user key; and
decrypt the secure memory block using the data access key.

### Claim 10 (depends on 1)

The data access control system of claim 1, wherein the user token further comprises a user identifier.

### Claim 11

A method for controlling data access, comprising:
providing a contactless card comprising a communications interface, a processor, and a memory, the memory storing a user token, the user token comprising a user key;
providing a client application comprising instructions for execution on a client device, the client device having an encrypted secure memory block storing personal user data, the client application configured to:
in response to a tap action between the contactless card and the client device, receive the user token from the contactless card, and transmit the user token and a request for a data access key;
receive the data access key, wherein the data access key is generated based on the user key;
decrypt the secure memory block using the data access key;
receive from the client device the user token and the request for the data access key;
identify the user based on the user token;
verify that the user is authorized to access the secure memory block in the client device;
transmit to the client device the data access key; and
after receipt of a re-encryption instruction, re-encrypt the secure memory block.

### Claim 12 (depends on 11)

The method of claim 11, wherein decrypt the secure memory block using the data access key comprises combining the data access key with data received from the contactless card to generate a new key used for performing the decryption.

### Claim 13 (depends on 11)

The method for controlling data access of claim 11, further comprising providing a server, the server configured to:
receive the user token and the request for the data access;
identify a user based on the user token;
verify that the user is authorized to access the secure memory block in the client device; and
transmit to the client device the data access key.

### Claim 14 (depends on 13)

The method of claim 13, wherein the server is further configured to authenticate the user based on the user key.

### Claim 15 (depends on 11)

The method of claim 11, wherein the client application is further configured to receive biometric information prior to decrypting the secure memory block.

### Claim 16

A non-transitory machine-readable medium having stored thereon an application comprising program code for execution on a client device, the client device configured to communicate over a short-range communication field with a contactless card, the contactless card comprising memory storing a user token comprising a user key, the application configured to, when executed, perform procedures comprising:
in response to a tap action between the contactless card and the client device, receiving the user token from the contactless card, and transmitting the user token and a request for a data storage key;
receiving, in response to the request, the data storage key, wherein the data storage key is generated from the user key;
creating a secure memory block in a memory of the client device;
storing personal user data in the secure memory block;
encrypting the secure memory block using the data storage key;
generating a data access key based on the user key;
decrypting the secure memory block using the data access key; and
re-encrypting the secure memory block using the data storage key.

### Claim 17 (depends on 16)

The non-transitory machine-readable medium of claim 16, wherein the user token comprises a user key, and wherein the application is further configured to, when executed, perform procedures comprising:
in response to a tap action between the contactless card and the client device, receiving the user token from the contactless card; and
verifying that a user associated with the user token is authorized to access the secure memory block in the client device.

### Claim 18 (depends on 16)

The non-transitory machine-readable medium of claim 16, wherein re-encrypting the secure memory block using the data storage key is performed after receipt of a re-encryption instruction.

### Claim 19 (depends on 16)

The non-transitory machine-readable medium of claim 16, wherein the application is further configured to, when executed, perform procedures comprising:
synchronizing data with a server; and
generating the data access key based on the user key and the synchronized data.

### Claim 20 (depends on 19)

The non-transitory machine-readable medium of claim 19, wherein the application is further configured to, when executed, perform procedures comprising:
receive, prior to re-encrypting the secure memory block, a user command; and
responsive to the user command, re-encrypt the secure memory block.